Senior Cybersecurity Infrastructure Engineer - Remote

Sentara Health; Saint Paul (MN); Remote; USD 120,000 - 150,000; Full time

Job summary

Sentara is seeking a Senior Cybersecurity Infrastructure Engineer to lead IAM/IGA initiatives using Saviynt. The role involves designing and implementing complex identity solutions across enterprise systems, with extensive collaboration among security, IT, and business teams.

You’ll drive provisioning, deprovisioning, access reviews, RBAC, and SO D while maintaining integrations with Active Directory, Entra ID, LDAP, HR systems, and cloud apps.

Qualifications

• 5+ years IAM/IGA or cybersecurity engineering experience.
• Hands-on with Saviynt platform.
• Experience integrating IAM with Active Directory, Entra ID, LDAP, HR systems, cloud apps.
• Proficient in Java, PowerShell, Python, SQL.
• Experience with RBAC and access certifications.

Responsibilities

• Design, develop, implement, test, and support enterprise IAM/IGA solutions using Saviynt.
• Develop integrations between Saviynt and AD, Entra ID, LDAP, HR systems, and cloud apps.
• Create REST APIs, web services, and ETL processes for identity data exchange.
• Provide advanced IAM governance, RBAC, SoD, and access review campaigns.
• Support audits and compliance activities with evidence gathering.
• On-call production support.

Skills

Saviynt

IAM

IGA

Cybersecurity Engineering

Active Directory

Entra ID / Azure AD

REST APIs

Java

PowerShell

Python

SQL

RBAC

SoD

Education

Bachelor’s degree in Computer Science / Information Systems / Cybersecurity / Software Engineering

7+ years of relevant experience without a degree

Tools

Saviynt

Job description

Location & Remote Status

City/State: Virginia Beach, VA

Work Shift: First (Days)

This position is fully remote.

Overview

Sentara is hiring a Senior Cybersecurity Infrastructure Engineer!

Responsibilities

• Managing projects/processes, and working independently with limited supervision.
• Coaching and reviewing the work of lower-level professionals.
• Problems faced are difficult and sometimes complex.
• Responsible for the design, development, implementation, testing, enhancement, and support of enterprise Identity and Access Management (IAM) solutions utilizing Saviynt and related security technologies.
• Applies advanced knowledge of software engineering principles, identity governance, access management, cybersecurity, system integration, and automation to support enterprise security initiatives and business objectives.
• Specific duties include: Designing, developing, configuring, testing, and implementing complex IAM and Identity Governance Administration (IGA) solutions using the Saviynt platform to support enterprise security, compliance, and access management requirements.
• Developing and maintaining custom software components, workflows, connectors, and application integrations between Saviynt and enterprise systems, including Active Directory, Azure AD/Entra ID, LDAP directories, cloud applications, databases, HR systems, and other business-critical platforms.
• Analyzing business and technical requirements to design scalable identity lifecycle management solutions, including user provisioning, deprovisioning, role management, access certification, segregation of duties (SoD), and privileged access controls.
• Performing software engineering activities related to identity governance, including coding, scripting, debugging, testing, deployment, and lifecycle management of IAM applications and integrations.
• Designing and implementing automated identity management processes, including account provisioning workflows, role-based access controls (RBAC), policy management, and access review campaigns.
• Developing and maintaining REST APIs, web services, and ETL/integration processes to facilitate secure exchange of identity and access data across enterprise environments.
• Engineering and supporting Saviynt security controls, identity repositories, access governance solutions, and compliance monitoring capabilities to meet organizational and regulatory requirements.
• Conducting complex data analysis of identity, entitlement, access, and authorization information to improve security posture, operational efficiency, and compliance with internal policies and regulatory frameworks.
• Performing system design reviews, troubleshooting complex technical issues, conducting root cause analysis, and implementing software enhancements to improve IAM platform performance, scalability, reliability, and security.
• Developing dashboards, reports, and analytics related to identity governance, user access, compliance, audit findings, policy violations, and security metrics using Saviynt reporting capabilities and related technologies.
• Collaborating with software engineers, cybersecurity architects, infrastructure teams, application owners, and business stakeholders to design and implement IAM solutions aligned with enterprise architecture standards.
• Preparing and maintaining functional specifications, software design documents, technical architecture diagrams, configuration standards, implementation procedures, and operational support documentation.
• Supporting security audits, compliance assessments, and certification activities by providing technical expertise, evidence gathering, access reviews, and remediation recommendations.
• Researching, evaluating, and implementing emerging IAM, cybersecurity, cloud identity, and software engineering technologies to continuously improve identity governance capabilities and operational effectiveness.
• Pursuing continuous improvement of IAM processes, security controls, automation frameworks, software development practices, system performance, and overall quality of service.
• Must be part of on call production support schedule.

Qualifications

• 5+ years of relevant experience with a bachelor's degree in Computer Science, Information Systems, Cybersecurity, Software Engineering, or a related field (Required) or 7+ years of relevant experience without a degree (Required)
• Experience in lieu of Bachelor’s Degree
• Certification/Licensure: No specific certification or licensure requirements
• 5+ years of experience in Identity and Access Management (IAM), Identity Governance and Administration (IGA), or Cybersecurity Engineering.
• 3+ years of hands‑on experience implementing and supporting
• Saviynt
• Experience designing, configuring, and supporting identity lifecycle management processes, including user provisioning, deprovisioning, role management, and access certifications.
• Experience integrating IAM/IGA platforms with enterprise systems such as Active Directory, Microsoft Entra ID (Azure AD), LDAP, HR systems, databases, and cloud applications.
• Experience developing and supporting application integrations using REST APIs, web services, and automation frameworks.
• Strong software development and scripting experience using technologies such as Java, JavaScript, PowerShell, Python, SQL, or similar programming languages.
• Experience with Role-Based Access Control (RBAC),